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Founded on the principle of easy Information interchange the Internet is an inherently 
unsafe communication medium. Despite this inherent insecurity electronic mall continues 
to grow as a l<ey communication technology. Individuals and businesses both large and 
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In this paper, we argue that person-to-person key distribution is best accomplished with a 
key-centric approach, instead of PKI: users should distribute public key fingerprints in the 
same way they distribute phone numbers, postal addresses, and the like. To make this 
work, fingerprints need to be small, so users can handle them easily; multipurpose, so 
only a single fingerprint is needed for each user; and long-lived, so fingerprints don't have 
to be frequently redistribute ... 
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Full text available: ^ pdf(490.78 KB) Additional Information: full citation , abstract , references , index terms 

Home medical devices enable individuals to monitor some of their own health information 
without the need for visits by nurses or trips to medical facilities. This enables more 
continuous information to be provided at lower cost and will lead to better healthcare 
outcomes. The technology depends on network communication of sensitive health data. 
Requirements for reliability and ease-of-use provide challenges for securing these 
communications. In this paper we look at protocols for the drop-box ... 
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Walt Curtis, Lorl Sinton 

March 1999 International Journal of Network Management volume 9 issue i 
Publisher: John Wiley & Sons, Inc. 

Full text available: gpdf (982. 14 KB) Additional Information: full citation , abstract , index terms 

Electronic commerce Is inevitable and will reshape our lives, but before true electronic 
commerce environments can be realized; it will be necessary to secure your enterprise 
against outside attacks on its electronic information and provide controls for authorized 
access to that information. Copyright © 1999 John Wiley & Sons, Ltd. 

Research contibutions: A review of Information security issues and respective 

research contributions 

Mikko T. Siponen, Harri Oinas-Kukkonen 

February 2007 ACM SIGMIS Database, volume 38 issue i 

Publisher: ACM Press 

Full text available: ^ pdf(353.82 KB) Additional Information: full citation , abstract , references , index terms 

This paper identifies four security issues (access to Information Systems, secure 
communication, security management, development of secure Information Systems), and 
examines the extent to which these security issues have been addressed by existing 
research efforts. Research contributions in relation to these four security Issues are 
analyzed from three viewpoints: a meta-model for information systems, the research 
approaches used, and the reference disciplines used. Our survey reveals that most ... 
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Full text available: TO pdf (296.88 KB) ; 
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We are moving toward an international, 24-hour, distributed, electronic stock exchange. 
The exchange will use the global Internet, or Internet technology. This system is a natural 
application of multicast because there are a large number of receivers that should receive 
the same information simultaneously. The data requirements for the stock exchange are 
discussed. The current multicast protocols lack the reliability, fairness, and scalability 
needed in this application. We describe a distr ... 

Keywords: multicast 



11 Email and security: How to make secure email easier to use 

^ Simson L. Garfinkel, David Margrave, Jeffrey I. Schiller, Erik Nordlander, Robert C. Miller 
^ April 2005 Proceedings of the SIGCHI conference on Human factors in computing 
systems CHI '05 
Publisher: ACM Press 



http://portaLacm.org/results.cfm?CFID=25519950&CFTOKEN=76458740&adv=l&COLL=... 7/31/07 



Results (page 1): +automated, +electronic +messaging, -Hencryption password, public key,... Page 4 of 6 
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Cryptographically protected email has a justly deserved reputation of being difficult to 
use. Based on an analysis of the REM, PGP and S/MIME standards and a survey of 470 
merchants who sell products on Amazon.com, we argue that the vast majority of Internet 
users can start enjoying digitally signed email today. We present suggestions for the use 
of digitally signed mail in e-commerce and simple modifications to webmall systems that 
would significantly increase integrity, privacy and authorship ... 
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Classical security protocols aim to achieve authentication and confidentiality under the 
assumption that the peers behave honestly. Some recent protocols are required to 
achieve their goals even if the peer misbehaves. Accountability is a protocol design 
strategy that may help. It delivers to peers sufficient evidence of each other's 
participation in the protocol. Accountability underlies the nonrepudiation protocol of Zhou 
and Gollmann and the certified email protocol of Abadi et al. Thi ... 

Keywords: Isabelle, Nonrepudiation, certified email, inductive method, proof tools 



13 Healthcare data integration and exchange: Brid g ing a ga p in the pro posed personal 
health record 

Wai Gen Yee, Brett Trockman 

November 2006 Proceedings of the international worksliop on Healthcare information 
and knowledge management HZKM '06 

Publisher: ACM Press 

Full text available: ^ pd f( 280.88 KB ) Additional Information: full citation , abstract , references , index terms 

The emerging electronic health record infrastructure is guiding records to be stored in 
repositories that collectively supply a patient's comprehensive health history. However, 
legal and technological constraints may keep such a system from delivering health 
histories in a timely manner (i.e., when medical attention is needed). To get around this, 
we propose a design for a portable personal health record system that complies with 
HIPAA standards of security and interaction. The authenticity of s ... 
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